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REMARKS 

Amendment to the claims 

The language of claims 1, 2, 13, 22 and 23 has been amended for clarity's sake. 
Claim 30 has been cancelled without prejudice and the subject matter of claim 30 has 
been incorporated in claim 24. Claim 31, originally dependent on claim 30, has been 
made dependent on claim 24. No new matter has been added. 

Objections to the claim 

Claim 13 stands objected to for reciting "A method as claimed in claim 10, wherein 
input data may have an owner, and if so, the process may be required to obtain consent from the 
owner to use of the input data". Accordingly, claim 13 has been amended to recite "A 
method as claimed in claim 10, wherein input data may have an owner, and if so, the process 
may be required to obtain consent from the owner to use ef the input data". The Applicant 
therefore respectfully request the Examiner to withdraw the objections to claim 13. 

Objections to the specification 

The Abstract stands objected to for comprising more than 150 words, and the 
Specification stands objected to for comprising hyperlinks. Accordingly, the number of 
words of the Abstract has been reduced to 150 words, and the hyperlinks have been 
cancelled from the Specification. The Applicant therefore respectfully request the 
Examiner to withdraw the objections to the Abstract and to the Specification. 

Rejections under 35 U.S.C. 112 

Claims 1-23 and 30-31 stand rejected under 35 U.S.C. 112 as being indefinite for 
failing to particularly point out and distinctly claim the subject matter which Applicants 



U. S. Appln. No. 09/920,554 

Amendment dated May 3, 2005 

Reply to Office Action dated February 2, 2005 



Page 11 



regard as the invention. In particular, the Examiner finds that the limitation "at least 
some" in claims 1, 2, 22 and 30 does not describe a specific numerical range and does 
not provide a clear basis for comparison. Further, the Examiner finds that in claim 23 it 
is not clear whether the word "current" is modifying "the integrity metric", "the 
computing platform" or "the requestor". Claims 3-21 and 31 stand rejected due to their 
dependence on rejected base claims 1 and 30. 

Claims 1, 2, 3-21, 22, 30, and 31 

Claim 30 has been cancelled without prejudice and its subject matter has been 
incorporated in claim 24. Claim 31, originally dependent on claim 30, has been made 
dependent on claim 24. The words "at least some" have been replaced in claims 1, 2, 
and 22, and in the subject matter of claim 30 incorporated in claim 24, by the words "at 
least one". This amendment is supported by the specification, in particular Fig. 8 and 
the corresponding portion of the specification. The Applicant submits that the words 
"at least one" describes the lower limit of a specific numerical range comprising "at 
least one" process in the service and all the processes in the service, and thus provides a 
clear basis for comparison. Accordingly, the Applicant respectfully requests the 
Examiner to withdraw the above rejection of claims 1, 2, 22, as well as the rejection of 
dependent claims 3-21 and 31, and submits that claim 24 complies with 35 U.S.C. 112. 

Claim 23 

The language of claim 23 has been clarified to recite "A method as claimed in claim 
4, wherein the monitoring process provides to the requestor an integrity metric of the computing 
platform to the requestor ' current when at the time t he service was performed" . This 
amendment is supported by the specification, and in particular Fig. 8 and the 
corresponding portion of the specification. Accordingly, the Applicant respectfully 
requests the Examiner to withdraw the above rejection of claim 23. 
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Rejection under 35 U.S.C. 102 

Claims 1-6, 14-26 and 29-31 stand rejected under 35 U.S.C. 102(e) as being 
anticipated by U.S. Patent No. 6,289,462 to Mc Nabb. The Applicant respectfully 
disagrees. 

Claim 1 

In the Action, the Examiner asserts that Mc Nabb " discloses a method including a 
requester providing a specification of a service to be performed that establishes level of 
trust for processes in the service (see, for example, column 19, line 55 - column 20, line 
2)". The Applicant respectfully disagrees. Mc Nabb discloses, column 19, lines 60-62, a 
control method that "may be applied to a software application suite where each user is 
permitted to operate upon or view data at their sensitivity level " , wherein the 
sensitivity level of the data is given by an assigned sensitivity label SL that is used "to 
determine if a user or process can access certain objects or resources" (column 12, lines 
43-45). 

The Applicant submits that nowhere does Mc Nabb suggest using the sensitivity 
level, which allows determining if a process may be performed by a user, as a trust level 
as recited in claim 1, which indicates the "degree of reliability or security" with which a 
requested process must be performed (3 rd line of paragraph [0072] of the Application). 

Further, the Applicant notes that Mc Nabb provides for a plurality of users or 
processes having a same sensitivity level to access certain objects or resources (Mc Nabb 
provides at col. 18, lines 14-17 for "a set of user authorization privileges associated with 
the process that may describe the users individually or in a role "). In such a 
configuration, even a data /process with a high sensitivity level can have a low trust 
level for each of the users of the role allowed to access to the data /process, since any 
other user of the role would be able to tamper with the data /run the process. Therefore, 
the Applicant submits that Mc Nabb actually teaches away from using its "sensitivity 
level" as a "trust level" as recited in claim 1. 

Further, the Applicant notes that McNabb discloses a method wherein the SL 
labels are designed to be "not under the control of the user" (Col. 9, line 16) wherein, 
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when a requestor (user) provides a specification of a service to be performed, the 
specification of the service does not establish specified levels of sensitivity for the 
processes in the service: in Mac Nabb the levels of sensitivity for the processes in the 
service are assigned, for example as a function of the IP address of the user (col. 16, lines 
18-19). The Applicant therefore submits that Mc Nabb actually teaches away from a 
method wherein specified levels are established under the control of a requestor, and in 
particular from a method wherein " the specification of the service ", provided by the 
user, " establishes specified levels of trust for at least one of the processes in the service", 
as recited in claim 1. 

At least in view of the above, the Applicant submits that claim 1 is patentable over 
Mc Nabb. Should the Examiner disagree, Applicants respectfully request him to clearly 
and specifically point out where Mc Nabb discloses the above features, in accordance 
with37C.F.R.1.104(c)2. 

Claim 24 

The above arguments regarding claim 1 can be used to show that Mc Nabb does 
neither disclose or suggest, and actually teaches away from a computing platform as 
recited in claim 24, and in particular comprising "a service management process adapted to 
receive a service description which includes levels of trust assigned to processes within the 
service, and to allocate at least one of the processes to the compartments". At least in view of 
the above, the Applicant submits that claim 24 is patentable over Mc Nabb. 

Claims 2-6, 14-23, 25-26 and 29-31 

Claim 30 has been cancelled without prejudice. Claims 2-6 and 14-23 depend 
directly or indirectly on claim 1, and claims, 25-26 and 29 and 31 depend directly or 
indirectly on claim 24. The Applicant submits that claims 2-6, 14-23, 25-26, 29 and 31 are 
patentable over Mc Nabb at least in view of their dependency on claims 1 and 24. 
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Rejection under 35 U.S.C. 103 

Claims 7-13 and 27-28 stand rejected under 35 U.S.C. 103(a) as being 
unpatentable over Mc Nabb in view of "HP Virtualvault Trusted Web-server Platform 
Product Brief" (Virtualvault). The Applicant respectfully disagrees. 

Claims 7-13 

Claims 7-13 depend on claim 1, and claims 27-28 depend on claim 24. The 
Applicant submits that the Examiner has failed to show that Virtualvault discloses or 
suggests a method as recited in claim 1, and in particular comprising: "the requestor 
providing a specification of the service to be performed to the computing platform, wherein the 
specification of the service establishes specified levels of trust for at least one of the processes in 
the service", or a computing platform as recited in claim 24, and in particular, 
comprising: "a service management process adapted to receive a service description which 
includes levels of trust assigned to processes within the service, and to allocate at least one of the 
processes to the compartments". Accordingly, the Applicant submits that no combination 
of Mc Nabb and Virtualvault would have led one skilled in the art to a method as 
recited in claim 1 or to a computing platform as recited in claim 24, and that both claims 
1 and 24 are patentable over Mc Nabb in view of VirtualVault. The Applicant further 
submits that at least in view of their dependency on claims 1 or 24, claims 7-13 and 
claims 27-28 are patentable over Mc Nabb in view of Virtualvault 

* * * 

In view of the above, the Applicant submits that the application is now in 
condition for allowance and respectfully urges the Examiner to pass this case to issue. 

The Commissioner is authorized to charge any additional fees that may be 
required or credit overpayment to deposit account no. 08-2025. In particular, if this 
response is not timely filed, the Commissioner is authorized to treat this response as 
including a petition to extend the time period pursuant to 37 CFR 1.136(a) requesting an 
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extension of time of the number of months necessary to make this response timely filed 
and the petition fee due in connection therewith may be charged to deposit account no. 
08-2025. 
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